[BusyBox 0004124]: ls --color reads uninitialized memory

[bugs at busybox.net]

The following issue has been SUBMITTED. 
====================================================================== 
http://busybox.net/bugs/view.php?id=4124 
====================================================================== 
Reported By:                cristic
Assigned To:                BusyBox
====================================================================== 
Project:                    BusyBox
Issue ID:                   4124
Category:                   Other
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     assigned
====================================================================== 
Date Submitted:             07-14-2008 19:48 PDT
Last Modified:              07-14-2008 19:48 PDT
====================================================================== 
Summary:                    ls --color reads uninitialized memory
Description: 
Hello, "ls --color" in busybox-1.11.1 reads uninitialized memory.  The
--color option requires an argument in busybox, but busybox-1.11.1 does
not validate this.  Thus, in ls.c, color_opt points to garbage memory, and
the strcmp() calls on lines 895, 897 and 899 in ls.c may read unitialized
memory.  GNU coreutils assumes "always" when no argument is passed to
color.

Cristian

====================================================================== 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
07-14-08 19:48  cristic        New Issue                                    
07-14-08 19:48  cristic        Status                   new => assigned     
07-14-08 19:48  cristic        Assigned To               => BusyBox         
======================================================================